JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.179.33.77

116.179.33.77 was found in our database!

This IP was reported 701 times. Confidence of Abuse is 66%: ?

66%

ISP	China United Network Communications Corporation Limited
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Taiyuan, Shanxi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.179.33.77

Whois 116.179.33.77

IP Abuse Reports for 116.179.33.77:

This IP address has been reported a total of 701 times from 70 distinct sources. 116.179.33.77 was first reported on December 13th 2021, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 1gz	2026-06-17 01:50:43 (21 hours ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /shqiperi/ish-deputeti-publikon-mesazhin-kercenues-te-ministrise-se-arsimit-mesuesit-te-pezullohen/527576/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇪🇸 librebit	2026-06-16 07:44:53 (1 day ago)	Brute force	Brute-Force
🇨🇦 1gz	2026-06-16 04:05:52 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-06-15 06:31:25 (2 days ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-06-15 02:58:50 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-06-14 09:14:16 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /teknologji/gates-trashampeumlguesi-i-vistas-vjen-vitin-e-ardhshampeumlm-/3835/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-06-14 06:22:21 (3 days ago)	Web App Attack	Web App Attack
🇬🇷 setupgr	2026-06-14 05:46:06 (3 days ago)	(PERMBLOCK) 116.179.33.77 has had more than 4 temp blocks in the last 86400 secs; Ports: ; Directio ... show more (PERMBLOCK) 116.179.33.77 has had more than 4 temp blocks in the last 86400 secs; Ports: ; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: N/A show less	Port Scan
🇬🇷 setupgr	2026-06-14 03:18:59 (3 days ago)	(mod_security) mod_security (id:100011) triggered by 116.179.33.77: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:100011) triggered by 116.179.33.77: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 14 06:18:57.438844 2026] [security2:error] [pid 921870:tid 922040] [client 116.179.33.77:21645] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/min/1/wp-content/plugins/jet-smart-filters/assets/css/public.css"] [unique_id "ai4doSiyK_EXlfCi56fQ5wAAAFg"], referer: https://ftiaxtomonosou.gr/%CE%BD%CF%84%CE%BF%CF%85%CE%BB%CE%AC%CF%80%CE%B1/page/6/ show less	Port Scan
🇬🇷 setupgr	2026-06-13 12:57:12 (4 days ago)	(mod_security) mod_security (id:100011) triggered by 116.179.33.77: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:100011) triggered by 116.179.33.77: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 15:57:08.900164 2026] [security2:error] [pid 784502:tid 784568] [client 116.179.33.77:35207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/min/1/wp-content/plugins/xt-woo-variation-swatches-pro/xt-framework/includes/customizer/controls/xt_icons/css/xt-icons.css"] [unique_id "ai1TpJXVg-ne6mm2XrSClwAAAAc"], referer: https://ftiaxtomonosou.gr/%CF%84%CE%B1_%CE%AD%CF%81%CE%B3%CE%B1_%CE%BC%CE%B1%CF%82/%CF%83%CF%87%CE%BF%CE%BB%CE%B5%CE%AF%CE%BF-%CF%87%CE%B1%CE%BB%CE%BA%CE%AF%CE%B4%CE%B1/ show less	Port Scan
🇬🇷 setupgr	2026-06-13 10:56:27 (4 days ago)	(mod_security) mod_security (id:100011) triggered by 116.179.33.77: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:100011) triggered by 116.179.33.77: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 13:56:27.024986 2026] [security2:error] [pid 784517:tid 784718] [client 116.179.33.77:10852] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/elementor/css/post-21047.css"] [unique_id "ai03W061JOobkOOcZGIxqAAAAMc"], referer: https://ftiaxtomonosou.gr/%CF%84%CE%B1_%CE%B5%CE%AF%CE%B4%CE%B7_%CF%84%CE%BF%CF%85_%CE%BE%CF%8D%CE%BB%CE%BF%CF%85/%CE%AC%CF%81%CE%BA%CE%B5%CF%85%CE%B8%CE%BF%CF%82/ show less	Port Scan
🇬🇷 setupgr	2026-06-13 08:21:29 (4 days ago)	(mod_security) mod_security (id:100011) triggered by 116.179.33.77: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:100011) triggered by 116.179.33.77: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 11:21:24.877139 2026] [security2:error] [pid 705293:tid 705489] [client 116.179.33.77:18989] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/min/1/wp-content/plugins/jet-tabs/assets/css/jet-tabs-frontend.css"] [unique_id "ai0TBHxsrtCDMa-O0cInMwAAAQw"], referer: https://ftiaxtomonosou.gr/%CF%84%CE%B1_%CE%AD%CF%81%CE%B3%CE%B1_%CE%BC%CE%B1%CF%82/%CF%83%CF%87%CE%BF%CE%BB%CE%B5%CE%AF%CE%BF-%CF%87%CE%B1%CE%BB%CE%BA%CE%AF%CE%B4%CE%B1/ show less	Port Scan
🇫🇷 Sklurk	2026-06-13 06:22:19 (4 days ago)	Web App Attack	Web App Attack
🇪🇸 librebit	2026-06-13 05:33:59 (4 days ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-06-13 04:50:41 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 116.179.33.77 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 116.179.33.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 00:50:34.290029 2026] [security2:error] [pid 24992:tid 24998] [client 116.179.33.77:1852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tomithai.com"] [uri "/wp-config.txt"] [unique_id "aizhmiGRoV_8Qoz2M6gH-gAAAIQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 701 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.242

🇺🇸 147.185.132.200

🇮🇶 37.239.104.7

🇨🇳 222.223.121.236

🇩🇪 195.230.103.243

🇳🇱 176.65.139.234

🇮🇳 122.187.230.38

🇦🇺 35.213.213.160

🇺🇸 198.62.3.9

🇧🇷 170.82.121.47

🇬🇧 35.203.211.210

🇷🇴 2.57.122.177

🇵🇪 200.107.163.195

🇺🇸 147.185.132.204

🇷🇴 80.94.92.187

🇺🇸 66.132.172.190

🇩🇪 47.254.174.130

🇦🇺 13.55.73.127

🇨🇳 218.207.25.249

🇺🇸 216.25.89.84